Skip to content

backport rustls/webpki path complexity budget#277

Merged
briansmith merged 3 commits intobriansmith:mainfrom
cpu:cpu-rustls-backport-path-complexity-fix
Sep 30, 2023
Merged

backport rustls/webpki path complexity budget#277
briansmith merged 3 commits intobriansmith:mainfrom
cpu:cpu-rustls-backport-path-complexity-fix

Conversation

@cpu
Copy link
Contributor

@cpu cpu commented Sep 8, 2023

This is intended to be complementary to the signature validation limit fix (#273) and addresses https://github.com/briansmith/webpki/issues/276 in the same manner as NSS libmozpkix. Originally implemented by @ctz in rustls/webpki#163.

Ive backported the change, adapting it to this repository's main branch and folded in some later improvements that were made after rustls/webpki#163 (e.g. cleaning up imports, using a more readable numeric literal, fixing the unit test).

@codecov
Copy link

codecov bot commented Sep 8, 2023

Codecov Report

Merging #277 (95b6b20) into main (4a71d47) will increase coverage by 0.45%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##             main     #277      +/-   ##
==========================================
+ Coverage   50.62%   51.08%   +0.45%     
==========================================
  Files          18       18              
  Lines        3751     3786      +35     
==========================================
+ Hits         1899     1934      +35     
  Misses       1852     1852              
Files Changed Coverage Δ
src/verify_cert.rs 94.69% <100.00%> (+0.61%) ⬆️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

This is intended to be complementary to the signature validation limit
fix and addresses briansmith/webpki#276 in the same manner as NSS
libmozpkix.
@cpu cpu force-pushed the cpu-rustls-backport-path-complexity-fix branch from 6a47dc1 to 95b6b20 Compare September 15, 2023 18:03
@briansmith briansmith self-requested a review September 30, 2023 02:06
@briansmith briansmith merged commit f566cf1 into briansmith:main Sep 30, 2023
@briansmith
Copy link
Owner

Thank you. I pushed #279 for some follow-ups.

@cpu cpu deleted the cpu-rustls-backport-path-complexity-fix branch September 30, 2023 12:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants